muad-dib v2.12.0

Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 278 detection rules, a...

iocx v0.7.6.1

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

TCPViewer v1.14.0

TCP Viewer A simple, native packet viewer for Mac. Website · Download · Docs · Releases TCP Viewer captures and reads network packets on macOS. It uses system libpcap for capture and Wireshark libraries for deep packet details. Features Native macOS app, built with AppKit Built on top of Wireshar...

checkov v3.3.16

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

Shenron

Shenron 日本語版 README Shenron is a passive Rus...

Risk-Analysis-Editor v3.0.0

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

Security and Privacy in the Musical Metaverse: Threat Analysis and Design Implications

The Musical Metaverse MM introduces immersive, real-time environments for collaborative musical interaction, characterized by ultra-low-latency constraints, continuous multimodal data streams, and heterogeneous devices. These properties create a distinctive security and privacy landscape that...

angr 9.3.4

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

An Empirical Analysis of CodeQL False Positives and Query Refinements for Java Vulnerabilities

Static application security testing SAST tools help developers find vulnerabilities before deployment, but false positives create substantial triage effort. We study whether CodeQL false positives in Java security analysis form recurring, explainable patterns that can be reduced by refining the...

ida_kcpp — Updated!

idakcpp An IDAPython module for way more convienent way to Reverse Engineering iOS kernelcaches. Big part of the iOS kernelcache is written by C++, which compiled into complicated binary code use many virtual table derefences rather than explicit direct calls.idakcpp takes the advanteage of...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811

agentverus-scanner (a security scanning tool for code analysis) fails to analyze compiled Python bytecode files in companion code directories, enabling a security scanning bypass . Attackers can ship malicious __pycache__ entries alongside benign source files, causing arbitrary Python bytecode to...

EUVD-2026-70226

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

CVE-2026-84810

claude-skill-antivirus (v2.1.3) performs a manifest-only scan of local skill directories, reading only the SKILL.md file while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills embedding malicious executable payloads in non-manifest fi...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...